| Sep 15 | VMware sealed-secrets: observable discrepancy Medium4.2Sep 15 | Medium4.2 | No fix yet |
| Sep 11 | VMware UAA: improper access controlCritical9.2Sep 11 | Critical9.2 | No fix yet |
| Aug 29 | VMware bosh-vsphere-cpi-release: improper certificate validationHigh7.7Aug 29 | High7.7 | 98.0.6 |
| Aug 27 | VMware Spring AMQP: resource leakMedium6.5Aug 27 | Medium6.5 | No fix yet |
| Aug 27 | VMware Spring Integration: race conditionMedium4.2Aug 27 | Medium4.2 | No fix yet |
| Aug 27 | VMware Spring Integration: improper input validationMedium6.3Aug 27 | Medium6.3 | No fix yet |
| Aug 27 | VMware Spring Integration: race conditionHigh8.2Aug 27 | High8.2 | No fix yet |
| Aug 27 | VMware Spring Integration: unsafe deserializationHigh8.0Aug 27 | High8.0 | No fix yet |
| Aug 27 | VMware Spring Integration: link followingMedium6.8Aug 27 | Medium6.8 | No fix yet |
| Aug 27 | Spring MVC applications using the functional web framework are vulnerable to...Critical9.8Aug 27 | Critical9.8 | No fix yet |
| Aug 27 | Applications that build a Content-Disposition header value from untrusted input...Low3.7Aug 27 | Low3.7 | No fix yet |
| Aug 27 | VMware Spring Cloud Config: denial of serviceMedium5.3Aug 27 | Medium5.3 | No fix yet |
| Aug 27 | VMware Spring Authorization Server: cross-site scriptingHigh8.2Aug 27 | High8.2 | No fix yet |
| Aug 27 | VMware Spring for Apache Kafka: improper quantity validationMedium6.5Aug 27 | Medium6.5 | No fix yet |
| Aug 27 | VMware Spring AI: attacker could inject RediSearch syntaxMedium4.3Aug 27 | Medium4.3 | No fix yet |
| Aug 27 | VMware Spring Cloud Function: improper input validationLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | Composition lookup can potentially poison base function in Spring Cloud FunctionLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Function: secrets in logsLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Function: secrets in logsLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Stream: secrets in logsLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Stream: resource exhaustionLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Stream: type confusionLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | Partition interceptor may be improperly added while sending messageLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Stream: unsafe deserializationLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring for GraphQL: information disclosureHigh7.4Aug 27 | High7.4 | No fix yet |
| Aug 27 | VMware Spring for GraphQL: denial of serviceHigh7.5Aug 27 | High7.5 | No fix yet |
| Aug 27 | VMware Spring Cloud Function: arbitrary file readLow2.0Aug 27 | Low2.0 | No fix yet |
| Aug 27 | VMware Spring Integration: insecure permissionsLow3.2Aug 27 | Low3.2 | No fix yet |
| Aug 27 | VMware Spring Integration: tamperingMedium6.6Aug 27 | Medium6.6 | No fix yet |
| Aug 27 | VMware Spring AI: path traversalMedium5.9Aug 27 | Medium5.9 | No fix yet |
| Aug 27 | VMware Spring Cloud Function: origin validation errorLow3.1Aug 27 | Low3.1 | No fix yet |
| Aug 27 | VMware Spring Framework: code injectionMedium6.1Aug 27 | Medium6.1 | No fix yet |
| Aug 27 | VMware Spring Framework: denial of serviceHigh7.5Aug 27 | High7.5 | No fix yet |
| Aug 27 | Applications that evaluate Spring Expression LanguageCritical9.1Aug 27 | Critical9.1 | No fix yet |
| Aug 27 | VMware Spring Cloud Commons: mass assignmentHigh7.6Aug 27 | High7.6 | No fix yet |
| Aug 27 | VMware Spring for GraphQL: unsafe deserializationHigh8.1Aug 27 | High8.1 | No fix yet |
| Aug 27 | VMware Spring for GraphQL: code executionHigh8.1Aug 27 | High8.1 | No fix yet |
| Aug 27 | VMware Spring for GraphQL: denial of serviceMedium5.9Aug 27 | Medium5.9 | No fix yet |
| Aug 27 | Several components in Spring Security compare security-sensitive values using...Medium5.9Aug 27 | Medium5.9 | No fix yet |
| Aug 27 | VMware Spring Security: protection mechanism failureLow3.7Aug 27 | Low3.7 | No fix yet |
| Aug 27 | Any application shipping logs to RabbitMQ over TLS via the Log4j2 appenderMedium6.8Aug 27 | Medium6.8 | No fix yet |
| Aug 27 | VMware Spring Framework: path traversalMedium4.3Aug 27 | Medium4.3 | No fix yet |
| Aug 27 | VMware Spring Security: cross-site scriptingCritical9.6Aug 27 | Critical9.6 | No fix yet |
| Aug 27 | VMware Spring Authorization Server: open redirectMedium6.1Aug 27 | Medium6.1 | No fix yet |
| Aug 27 | VMware Spring AMQP: unsafe deserializationMedium6.6Aug 27 | Medium6.6 | No fix yet |
| Aug 27 | VMware Spring for Apache Kafka: server-side request forgeryMedium6.5Aug 27 | Medium6.5 | No fix yet |
| Aug 27 | VMware Spring Security: improper authorizationCritical9.4Aug 27 | Critical9.4 | No fix yet |
| Aug 27 | VMware Spring AMQP: information disclosure in errorsMedium5.3Aug 27 | Medium5.3 | No fix yet |
| Aug 27 | VMware Spring Integration: denial of serviceMedium6.5Aug 27 | Medium6.5 | No fix yet |
| Aug 27 | Spring MVC and WebFlux applications are vulnerable to stream corruptionCritical9.8Aug 27 | Critical9.8 | No fix yet |
| Aug 27 | VMware Spring Framework: resource exhaustionCritical9.8Aug 27 | Critical9.8 | No fix yet |
| Aug 27 | VMware Spring Framework: improper authorizationCritical9.8Aug 27 | Critical9.8 | No fix yet |
| Aug 27 | VMware Spring Framework: information disclosure in errorsHigh7.5Aug 27 | High7.5 | No fix yet |
| Aug 27 | Spring Cloud Config Server native environment repositoryMedium4.9Aug 27 | Medium4.9 | No fix yet |
| Aug 27 | VMware Spring Framework: denial of serviceHigh7.5Aug 27 | High7.5 | No fix yet |
| Aug 27 | VMware Spring Framework: open redirectMedium6.1Aug 27 | Medium6.1 | No fix yet |
| Aug 27 | VMware Spring Framework: memory leakHigh7.5Aug 27 | High7.5 | No fix yet |
| Aug 27 | A WebFlux application running on the Jetty 12 Core reactive adapter serializes...High7.5Aug 27 | High7.5 | No fix yet |
| Aug 27 | VMware Spring Batch: resource exhaustionMedium5.9Aug 27 | Medium5.9 | No fix yet |
| Aug 27 | VMware Spring Framework: open redirectMedium6.1Aug 27 | Medium6.1 | No fix yet |